Vulnerability details

CVE-2026-45176

CyberArk Software, a Palo Alto Networks Idira Endpoint Privilege Manager

Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation

CVSS 4.0

8.9High

Official description

Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by manipulating an internal communication mechanism or file operation. Under specific circumstances, this could potentially allow the attacker to bypass permission restrictions and execute unauthorized local actions with elevated privileges. CyberArk Security Bulletin: CA26-19

CVSS scores

Score	Version	Source	Vector
8.9High	4.0	CVEProject cvelistV5 (CNA) (palo_alto)	`CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Amber`

Affected products

Vendor	Product	Versions	Source
CyberArk Software, a Palo Alto Networks Company	Idira Endpoint Privilege Manager	26.0 ≤ v < 26.5	CVEProject cvelistV5 (CNA)

References and advisories

https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-windows.htm#Version2650 vendor-advisory
https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-macos.htm#Version2650 vendor-advisory
https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-linux.htm#Version2650 vendor-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-06-11
Last updated: 2026-06-13
State: Published
Assigner (CNA): palo_alto

Exploit prediction (EPSS)

0.12%

Probability of exploitation in 30 days

2.1%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-269
[Discouraged] CWE-269: Improper Privilege Management